buf does not warn about out of sync issue with buf.yaml and buf.lock

GitHub repository with your minimal reproducible example (do not leave this field blank or fill out this field with "github.com/bufbuild/buf" or we will automatically close your issue, see the instructions above!)

https://github.com/josejulio/buf-dep-reproducer?tab=readme-ov-file

Commands

buf build

Output

# No output

Expected Output

WARNING: buf.yaml dependency `buf.build/bufbuild/protovalidate:v0.14.1` is out of sync with buf.lock file - using `buf.build/bufbuild/protovalidate:v0.7.1` instead. Run `buf dep update` to update the dependencies

Anything else?

I was using an old version of the dependency for a while without really knowing it, until some issues appeared months later and we confirmed we were using an old version of protovalidate.

It would be nice if buf generate and buf build would check if the lock file is still on sync with buf.yaml.

It would also be useful to have a command to check if the files are in sync without having to run buf build or buf generate (for ci purposes).